It’s just data

Caja: Capability Javascript

Ben Laurie: I’ve been running a team at Google for a while now, implementing capabilities in Javascript. Fans of this blog will remember that long ago I did a thing called CaPerl. The idea in CaPerl was to compile a slightly modified version of Perl into Perl, enforcing capability security in the process.

Hopefully like the work of Douglas Crockford [via Patrick Logan], the parser itself is (or will be) written in Simplified JavaScript.

This could be a useful, as an option, for CouchDB.  I don’t yet see the value for allowing even a sanitized subset of scripts through the UFP to Venus.


Tim Bray’s recent use of sorttable would be good to have even in feed readers.  But I’m not sure how you might distinguish between that and less-good scripts.

Posted by Matt Brubeck at

The initial version is written in Java, in fact.

I’m not sure why we’d want to write in Simplified JavaScript - clearly a JS version should be written in Caja.

Posted by Ben Laurie at

Add your comment